Detections
Analytics
Juniper Junos OpenSSL Multiple Vulnerabilities (JSA10575)
medium Nessus Plugin ID 68908
Language:
Synopsis
The remote device is missing a vendor-supplied security patch.Description
According to its self-reported version number, the remote Junos device is using an outdated version of OpenSSL, which has multiple vulnerabilities including (but not limited to) :- An error exists related to the handling of OCSP response verification that could allow denial of service attacks.
(CVE-2013-0166)
- An error exists related to the SSL/TLS/DTLS protocols, CBC mode encryption and response time. An attacker could obtain plaintext contents of encrypted traffic via timing attacks. (CVE-2013-0169)
Solution
Apply the relevant Junos upgrade referenced in Juniper advisory JSA10575.See Also
https://kb.juniper.net/InfoCenter/index?page=content&id=JSA10575
Plugin Details
Severity: Medium
ID: 68908
File Name: juniper_jsa10575.nasl
Version: 1.12
Type: combined
Family: Junos Local Security Checks
Published: 7/16/2013
Updated: 12/5/2022
Supported Sensors: Nessus
Risk Information
VPR
Risk Factor: Low
Score: 3.6
CVSS v2
Risk Factor: Medium
Base Score: 4.3
Temporal Score: 3.2
Vector: CVSS2#AV:N/AC:M/Au:N/C:N/I:N/A:P
Vulnerability Information
CPE: cpe:/o:juniper:junos
Required KB Items: Host/Juniper/JUNOS/Version, Host/Juniper/JUNOS/BuildDate
Exploit Ease: No known exploits are available
Patch Publication Date: 7/10/2013
Vulnerability Publication Date: 2/4/2013
Reference Information
CVE: CVE-2013-0166, CVE-2013-0169